Could someone please take a look?.
Thank you

The regression range only has three blink changes none of which touch rendering. Requesting a re-run.

Re-did the task as per Comment# 2.
Removing Needs Bisect label as of now, will update the issue once the re-run is successful.
Thank You.

Doing a manual bisect.

Even the known good from the latest bisect run fails for me. Expanding the range for the manual bisect run.

Unable to bisect past the generated CSSPropertyDescriptor change.

ClusterFuzz has detected this issue as fixed in range 471041:471079.

Detailed report: https://clusterfuzz.com/testcase?key=4535535709454336

Fuzzer: inferno_layout_test_unmodified
Job Type: mac_asan_chrome
Platform Id: mac

Crash Type: UNKNOWN READ
Crash Address: 0x00000000000d
Crash State:
  blink::RootInlineBox::closestLeafChildForLogicalLeftPosition
  blink::nextLinePosition
  blink::SelectionModifier::modifyMovingForward
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=mac_asan_chrome&range=434178:434216
Fixed: https://clusterfuzz.com/revisions?job=mac_asan_chrome&range=471041:471079

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4535535709454336


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 4535535709454336 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.